From b7c6c6f75a2dede7f2c65058c69e02a179eb702e Mon Sep 17 00:00:00 2001 From: CVE Team Date: Wed, 6 Mar 2019 00:05:50 -0500 Subject: [PATCH] - Synchronized data. --- 2019/9xxx/CVE-2019-9195.json | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/2019/9xxx/CVE-2019-9195.json b/2019/9xxx/CVE-2019-9195.json index a2f492e4932..de1f4844b7a 100644 --- a/2019/9xxx/CVE-2019-9195.json +++ b/2019/9xxx/CVE-2019-9195.json @@ -34,7 +34,7 @@ "description_data" : [ { "lang" : "eng", - "value" : "util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files in an archive." + "value" : "util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive." } ] }, @@ -61,6 +61,11 @@ "name" : "https://github.com/mimblewimble/grin/releases/tag/v1.0.2", "refsource" : "MISC", "url" : "https://github.com/mimblewimble/grin/releases/tag/v1.0.2" + }, + { + "name" : "https://www.grin-forum.org/t/critical-vulnerability-in-grin-1-0-1-and-older-fixed-in-1-0-2/4343", + "refsource" : "MISC", + "url" : "https://www.grin-forum.org/t/critical-vulnerability-in-grin-1-0-1-and-older-fixed-in-1-0-2/4343" } ] }